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[57] ABSTRACT 

The financial transaction processing system includes at least 
one financial server connected through a public network to 
a number of users associated with client computers. Each 
user accesses the financial server through a web browser. 
The web browser is provided with the capabilities to gen- 
erate encryption keys, to encrypt and decrypt HTML forms, 
and to digitally sign and timestamp HTML forms. The 
financial server transfers web pages including HTML forms 
representing financial transactions. The HTML forms con- 
tain extensions that specify the format of an incoming 
format and the format of a returned form. An HTML form 
can be transmitted in an encrypted format, in a format 
including a user's digital signature and timestamp, and in an 
encrypted format that contains the user's digital signature 
and timestamp. The financial server tracks each processed 
transaction through an audit trail including the user's 
account, the user's digital signature, the timestamp of the 
transaction, and the text of the transaction. 

31 Claims, 13 Drawing Sheets 
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SECURITY SYSTEM AND METHOD FOR 
FINANCIAL INSTITUTION SERVER AND 
CLIENT WEB BROWSER 

This invention relates to electronic communication sys- 
tems and in particular to a method and apparatus for securely 
transmitting transactions from an application program. 

BACKGROUND OF THE INVENTION 

Today, there is a great demand to support online financial 
transactions in a client/server computing environment. The 
key to the success of such systems are security features to 
ensure that an authorized party securely transmits a com- 
munication to an authorized recipient. At a minimum, five 
security features are needed: privacy, data integrity, access 
control, user nonrepudiation, and a server side audit trail. 

Current security technology for clients calling financial 
servers include (A) systems using passwords and the like to 
indicate a client's identity, (B) systems using session keys to 
encrypt the communications between a client and server so 
that outsiders cannot eavesdrop, and (C) systems using a 
digital signature and certification process. 

Session key encryption provides privacy protection, and 
password mechanisms provide basic access control capa- 
bilities. The prior art does not provide absolute assurance 
that the party claiming to be a client is in fact the identified 
client (or even that the party is using the client's 
workstation), and also does not protect, the financial insti- 
tution from claims by clients that they did not send a 
particular message or request. The audit trail of the prior art 
systems will only show that the party that sent the message 
or request used the client's password to log in, which is often 
not conclusive proof. Thus, the financial institution is at risk 
of repudiation of transactions by clients. 

Furthermore, the systems (e.g., Quicken, Netscape and 
Schwab's Smart Money using RSA encryption software) for 
encrypting the communications do so at the TCP/IP protocol 
layer of each system's software. This type of security 
technology limits the type of security features that can be 
provided. For instance, a security feature at the TCP/IP 
protocol level, such as SSL, typically provides only privacy 
by encrypting all data transmitted, but it cannot authenticate 
the client 

Systems utilizing client digital signatures are typically 
used with digital certificates. Digital certificates require a 
public key to be signed by a trusted third party. They are 
typically used to authenticate that a particular public key is 
really that of a particular user. However, financial institu- 
tions are reluctant to utilize digital certificates since they are 
wary of the potential liability associated with their fraudu- 
lent misuse. 

SUMMARY OF THE INVENTION 

The present invention pertains to a system and method for 
providing a secure communication mechanism between a 
financial server and a user associated with a web browser. 
The communication mechanism is used to ensure that finan- 
cial transactions are securely transmitted between the user 
and server across a public network. The system includes a 
group of users associated with client computers that are 
interconnected, by a computer network such as the Internet, 
to at least one financial server associated with a server 
computer. 

The financial server has a web server that manages the 
interactions between the users, through their web browsers, 
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and the financial server. The web server has a repository of 
web pages associated with various financial services pro- 
vided by the financial server. The web pages contain HTML 
documents and forms representing financial transactions that 

5 are exchanged between the user and the server. A user 
utilizes a web browser to access the HTML documents and 
to return data from HTML forms to the server. The server 
then processes the transactions and updates an audit trail that 
tracks each transaction. 

10 Due to the highly confidential nature of the transactions, 
the system and method of the present invention incorporates 
several security features into the web browser and web 
server. The following five security features are provided: 
privacy, in the form of session key encryption; data integrity, 

15 through the use of data encryption; access control, via a 
password mechanism; user nonrepudiation, by means of 
digital signatures and timestamps; and a server side audit 
trail. 

The web browser is provided with the capability to 

20 receive encrypted forms and to transmit messages contain- 
ing time stamped, digitally signed, and encrypted form data. 
The web browser has the ability to provide each user with a 
pair of encryption keys, preferably a private and public key 
pair. The web browser's initialization procedure generates 

25 these keys during installation. The keys are stored in an 
encrypted format and are only accessible from within the 
browser. The private key is used to digitally "sign" a 
transaction message when so requested. 

The web browser is also provided with the capability to 
generate random session keys, to decrypt HTML forms, and 
to encrypt and digitally sign and timestamp HTML form 
data. In addition, the web browser can interpret HTML 
extensions tc the FQP.M tag thai specify that as HTML form 
is encrypted as well as request the return transmission of 
HTML form data in one of three formats: (1) encrypted; (2) 
digitally signed with a timestamp; or (3) encrypted and 
digitally signed with a timestamp. 
To return the encrypted form data, the web browser 

^ generates a random session key that is used to encrypt the 
message containing the form data. The session key is affixed 
to the return message and encrypted with the server's public 
key. A header record is included at the top of the message 
and includes a flag indicating that the form data is encrypted. 

45 If a form requires the user's digital signature, the web 
browser uses the user's private key to "sign" the returned 
form data and to affix a digital timestamp. The web server 
authenticates the user's digital signature with the user's 
public key. For forms requiring a digital signature and 

50 encryption, the web browser signs the form data with the 
user's private key and includes a digital timestamp as well. 
The web browser generates a random session key that is 
used to encrypt the form data. The random session key is 
affixed to the return message and encrypted with the server's 

55 public key. 

The web server reads the header record associated with a 
received message in order to determine the format of the 
message. A flag associated with the header record indicates 
the particular format. Hie web server processes the message 

60 accordingly and updates an audit trail with the form data, the 
user's digital signature, and timestamp, if applicable. 

In order to verify a user's digital signature, a user regis- 
tration process is performed initially by the web server at the 
time a user's account is established. The registration process 

65 is facilitated by a user registration HTML form that elicits 
financial data pertaining to a potential user. A user appends 
its public key to the registration form data which is returned 
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to the web server The web server stores the users public key 
in a database and it is used thereafter to verify the user's 
digital signature which may be embedded in subsequent 
transactions. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Additional objects and features of the invention will be 
more readily apparent from the following Detailed Descrip- 
tion and appended claims when taken in conjunction with 
the drawings in which: 

FIG. 1 shows a financial transaction processing system 
according to an embodiment of the present invention. 

FIG. 2 shows a server computer system according to an 
embodiment of the present invention. 

FIG. 3 shows a client computer system according to an 
embodiment of the present invention. 

FIG. 4 shows a format of an audit trail residing in the 
server computer. 

FIG. 5 shows a return message layout in accordance with 
the present invention. 

FIG. 6 shows the record layout of the header record of the 
return message of FIG. 5. 

FIG. 7 is a schematic representation of an exemplary 
HTML FORM tag used in connection with a user registra- 
tion form. 

FIG. 8 is a schematic representation of an exemplary 
HTML FORM tag including additional fields that indicate 
the format of incoming forms and return messages. 

FIG. 9 is a flow chart of the steps used in the financial 
transaction processing system of the present invention. 

FIG. iO is a now chart of the steps used by the web 
browser to establish encryption keys for a user. 

FIG. 11 is a schematic representation of an exemplary 
web page used by the web browser to initiate the generation 
of a users encryption keys. 

FIGS. 12A-12B are flow charts of the steps used by the 
financial server in communicating with users associated with 
client computers. 

FIG. 13 is a flow chart of the steps used by the web 
browser in processing a user registration HTML form. 

FIG. 14 is a schematic representation of an exemplary 
user registration HTML form. 

FIGS. 15A-15B are flow charts of the steps used by the 
web browser in processing HTML documents. 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

Overview 

Referring to FIG. 1, the present invention pertains to a 
distributed financial transaction processing system 100 and 
method including at least one financial server associated 
with a server computer 102 in communication with a num- 
ber of users associated with client computers 106. 

The financial server 102 provides various financial ser- 
vices which are offered by a financial institution such as a 
bank, insurance company, brokerage firm, credit union, and 
the like. The financial services can include an online trading 
service, means for obtaining investment product information 
or financial news, means for monitoring a user's portfolio 
holding, and the like. 

Users connected to the financial server 102 can request 
any one of the financial services. One or more web pages are 
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associated with a service and are downloaded to the client 
computer 106 at the user's request. The web pages can 
include HTML documents 124 containing HTML forms 
used to elicit information from the user 106 that is trans- 
5 mitted to the server 102 or to provide information to the user 
106 from the server 102. In addition, the financial server 102 
contains an audit trail 122 that tracks each transaction. 

In certain cases, the HTML forms 124a can be transmitted 
to the web browser 216 in an encrypted format or without 

10 any special formatting. The web browser returns messages 
143 containing form data to the financial server 102 in an 
encrypted format, a format containing the user's digital 
signature and timestamp, an encrypted format containing the 
user's digital signature and timestamp, or without any spe- 

15 cial formatting. The web browser 216 has the capability to 
recognize special extensions to the HTML FORM tag that 
indicate the format of the incoming document and specify 
the format of the data to be returned. An alternate embodi- 
ment might specify extensions to other HTML tags. 

In addition, the web browser 216 is equipped with encryp- 
tion procedures 220, timestamp procedures 228, digital 
signature procedures 230, and random key generation pro- 
cedures 232. The random key generation procedures 232 are 

^ used to generate session keys that are used in conjunction 
with the encryption procedures 220 to encrypt a return 
message. The digital signature 230 and timestamp 228 
procedures enable the web browser to digitally sign and 
timestamp a return message 143. In addition, the initialize- 

^ tion procedures 226 enable the web browser 216 to generate 
encryption keys 218 that are used to represent and verify a 
user's digital signature. 

System Architecture 

3S Referring to FIG. 2, there is shown a distributed computer 
system 100 according to an embodiment of the present 
invention. The system 100 includes one or more server 
computers 102 and one or more client computers 106 that 
are in communication with each other through a communi- 

40 cation link 104. Preferably, the communication link 104 is a 
public network such as the Internet. 

A server computer 102 includes a central processing unit 
(CPU) 108, a user interface 110, a communications interface 
45 112, and a primary memory 114. The communications 
interface 112 is used to communicate with other user work- 
stations as well as other system resources not relevant here. 

The primary memory 114 of the server computer 102 may 

be implemented as RAM (random access memory) or a 
50 combination of RAM and non-volatile memory such as 

magnetic disk storage. The primary memory 114 of the 

server computer 102 can contain the following: 

an operating system 116; 

Internet access procedures 118; 
55 Web server procedures 120; 

an audit trail 122 tracking each financial transaction pro- 
cessed by the financial server 102; 

an HTML document repository 124; 

an encryption procedure 126 for encrypting and decrypting 
60 data; 

a digital signature procedure 128 for signing and verifying 

a digital signature; 
a user database 132 storing information associated with each 

user; 

65 one or more encryption keys 142 for use by the server, 
messages 143; 

as well as other data structures and procedures. 
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The user database 132 can store the following: 
an account identifier 134; 
a password 136; 

one or more of the user's encryption keys 140 that are used 
to authenticate a user's digital signature; and 

as well as other data structures and procedures. 

Referring to FIG. 3, a client computer 106 includes a 

central processing unit (CPU) 202, a user interface 204, a 

communications interface 206, and a primary memory 208. 

The communications interface 206 is used to communicate 

with other user workstations as well as other system 

resources not relevant here. 

Hie primary memory 208 of the client computer 106 may 

be implemented as RAM (random access memory) or a 

combination of RAM and non-volatile memory such as 

magnetic disk storage. The primary memory 208 of the 

server computer 102 can contain the following: 

an operating system 210; 

network access procedures 212; 

an HTML document repository 214; 

a web browser 216; 

messages 143; 

as well as other data structures and procedures. 

The web browser 216 can contain the following: 
one or more user encryption keys 218 associated with the 

user's digital signature; 
an encryption procedure 220 for encrypting and decrypting 

data; 

a random key generation procedure 222 for randomly gen- 
erating session keys; 

a formatting procedure 224 for configuring a return message 
in a requested manner; 

an initialization procedure 226 that establishes the user's 
encryption keys 21S; 

timestamp procedures 228 that generate a timestamp repre- 
senting a time and date; 

digital signature procedures 230 that are used to sign a form 
and verify a user's digital signature; 

the user's password 232; 

a browser welcome web page 234; 

a browser's encryption key 240 that is used to encrypt the 
users encryption keys 218; 

one or more session keys 241 for use in encrypting return 
messages to the server; 

as well as other data structures and procedures. 

File Formats 

The present invention utilizes an audit trail and a form file 
having prescribed formats. FIG. 4 represents a format of the 
server's audit trail 122. The audit trail 122 is used to track 
each transaction that is processed by the financial server 102. 
The audit trail 122 serves a variety of purposes. One such 
purpose is to verify client messages and requests. Each 
communication initiated by a client and received by the 
financial server 102 is recorded in the audit trail 122. 

Each entry 242 in the audit trail 122 can contain an 
account identifier 243 associated with a particular user, the 
digital signature 244 associated with a particular user, a 
timestamp 245 representing the date and time at which the 
user digitally signed the transaction, and the text 246 asso- 
ciated with the transaction. In some cases, a transaction form 
will contain the users digital signature and timestamp. In 
these cases, the users digital signature and timestamp can be 
used to refute potential repudiation claims by the user. The 
existence of the user's digital signature and timestamp 
signifies that a particular user executed the transaction and 
at a certain date and time. The ability to refute repudiation 
claims is sometimes called "nonrepudiation." 
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The benefit of this invention is that it helps reduce fraud 
and errors in three ways. First, it prevents unauthorized users 
from forging transactions. Second, it makes it difficult for a 
user to repudiate a transaction that has actually been made, 
5 Lastly, audit trail entries are potentially useful as judicial 
evidence. Furthermore, the security features of this inven- 
tion benefit companies such as Charles Schwab that offer 
securities and financial transaction services over the Inter- 
net. 

10 It should be noted that, in the description above, the 
timestamp stored in the audit trail was actually generated by 
the client. It is possible for this timestamp to be in error, 
either because of a configuration problem (e.g., the users PC 
had its clock set wrong) or because of fraudulent intent on 
the part of the user. The timestamp stored in the audit trail 

15 is thus merely the client's assertion as to the time at which 
the transaction was made. The server has several options 
available that can increase the trustworthiness of the audit 
trail entries. The server can store a timestamp of its own 
along with the client-supplied timestamp in the audit trail. 

20 Or, the server can reject transactions whose timestamps 
differ from the current actual time by a significant amount. 
Another possibility is for the server to generate a timestamp 
and send it to the client in another extension to the HTML 
FORM tag. The client would include the server-generated 

25 timestamp as part of the return message. Still another 
possibility would be for the server to generate a timestamp 
and to digitally sign it before sending it to the client. All of 
these possible embodiments increase the trustworthiness of 
the timestamps in the audit trail, thus serving to increase the 

^ usefulness of the audit trail in reducing fraud and errors. 
This invention employs digital signatures and encryption 
without using authentication certificates. Using digital sig- 
natures and encryption without authentication certificates 
offers several advantages over the prior art use of authenti- 
cation certificates. Setting up the authentication certificate 

35 infrastructure is very time-consuming and costly. The pro- 
cess of issuing certificates is very cumbersome. Authenti- 
cation certificates are useful in cases where more than two 
parties are involved in a transaction. The techniques 
employed in this invention are effective for two-party 

40 transactions, such as between a financial institution and one 
of its customers. Furthermore, these techniques avoid the 
expense of setting up the authentication certificate infra- 
structure as well as avoiding the overhead of certificate 
issuance and maintenance. 

45 FIGS. 5 and 6 Illustrate the return message layout that the 
web browser utilizes in returning a message 143 back to the 
server 102. The return message 143 contains a header record 
252 containing an account identification (ID) field 257, a 
flag field 258 and a key length field 260. The flag field can 

50 take on the following values: "E", representing an encrypted 
format; "S", indicating that the form data 256 contains a 
digital signature and a timestamp; "A", representing an 
encrypted format containing a digital signature and times- 
tamp; and "N", representing no special formatting. The key 
length field 260 indicates the length of a random session key 

55 when enclosed. 

The second record of the return message 143 can be the 
random session key 254. This key 254 is enclosed in the 
return message whenever the form data 256 is encrypted. In 
cases where the data is not transmitted in an encrypted 

60 format, no session key is included in the form file. The third 
portion of the return message 143 contains the form data 
256. The form data 256 is formatted as indicated in the flag 
field 258 of the header record 252. 
It should be noted that the present invention is not limited 

65 to the file formats and contents as previously described. 
Other formats can be used that can include different con- 
tents. 
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HTML Extensions Initially, a user associated with a client computer 106 installs 

The present invention employs extensions to the HTML a web browser 216 that generates a pair of encryption keys 

FORM tag. One set of extensions pertains to processing the 218 ( st ep 226). Preferably, a private/public key pair 218 is 

user registration HTML form 264. This form is used to created where the private key is used by the user to digitally 

transmit the server's public key to the user and for the user 5 sign forms and the public key is used by the server to 

to transmit to the server the users public key. A second set authenticate the user's digital signature, 

of extensions is used to indicate the format of received and A user establishes an account 134 with the financial server 

transmitted HTML forms and return messages. This account 134 is established through a user regis- 

HG. 7 shows the extensions to the HTML FORM tag tration HTML form 264 that is transmitted to the user when 

associated with a user registration form 268. The first is the 10 me initially accesses the financial server 102 (step 274). 

request field (e.g., request-"register") which is used to ^ ^ registration HTML form 264 elicits general and 

indicate the type of form that follows. A value of register financi al data from the user as well as the user's public key 

indicates that the form is a registration form. The second ^ 

new field is the key field (e.g., key="server*s public key*') ' . . 

which is used to indicate the server's public key. The 15 n 0nc ; e me user has established an account 134 with the 

server's public key is used in the encryption process asso- fin f aal ™ W2 > use ' ™ lo S on or ac ff thc account 

ciated with the returned user registration message. 134 at vanous ^ 276) Dunng each logon session, 

FIG. 8 illustrates the extensions to the HTML FORM tag thc ^ hu ™™ 1 *™ <*? J^^JFJP' 

. j . • j> . *i_ r e • /• transaction forms 124 and torms data 143 (step 278). lne 

that are used to indicate the format of incoming (i.e., - , f . , , t \ 

. j U *u uu \r #■ /* tormat or. the torms varies depending on the transaction type, 

received by the web browser) forms or outgoing (i.e., 20 T . iL 

-1 u *u u u * ,l \ In some cases, the server 102 can transmit to the user an 

transmuted by the web browser to the server) messages. The , - * A . ~ M 

Tt-nwi rAnxi * ij cc /a f . encrypted form. In other cases, the server 102 can request 

HTML FORM tag can include an oufformat and aninformat , **_ . , ■ * 

a u tv ff . c u -a .u r * <• »u — that the web browser 216 return a message in a number 01 

field. The oufformat field specifies the format of the return r . . , 4 . c . . & lt _ 

, tU . c t r a , , e „ . f #u formats. At the completion of a particular session, the user 

message and the informat field specifies the format of the . , A _ 0ftX , r A . f A . . lL lL 

incoming or received form. The values for the informat field ^ f>* ^ 280 ) c f ^activate another session with the 

can include "encrypt" indicating that the incoming form financial servcr 102 at a latcr timc - 

associated with the FORM tag is encrypted. The values for Each of the aforementioned processes will now be 

the oufformat field can include "encrypt", "sign", or described below in more detail, 
"ensign." The "encrypt" value signifies that the form data is 

to be returned in an encrypted format. The "sign" value 30 

signifies that the returned form data is to include the user's Initially before the financial transaction system 100 is 

digital signature and timestamp. The "ensign" value signi- initiated, a user installs a web browser 216 in the client 

fies that the returned form data is to be encrypted and include computer 106. As part of the web browser's installation 

the user's digital signature and timestamp. process, an initialization procedure 226 executes which 

In addition, the key field can be used to transmit a server's 35 generates one or more encryption keys 218. Preferably, a 

encryption key along with the informal and outformat field. private and public key pair are generated. The private key is 

The server's public key is transmitted to the web browser in used to create the user's digital signature and the public key 

order for the public key to be used to encrypt the session key. is used to verify the user's digital signature. 

In one embodiment, the server's public key can be included Referring to FIGS. 10 and 11, the initialization procedure 

in each HTML form that requires encryption. In another 40 2 26 displays a browser welcome page 234 (step 300). The 

embodiment, the server's public key can be included in the initialization procedure 226 prompts the user for the pass- 

first HTML form transmitted to the user. It is retained by the WQrd 232 associated with the browser 216 and verifies it 

web browser for the duration of the session. This obviates / step 302 ) Upon successful verification, the user's private/ 

the need to retransmit the server's public key with each pilbUc encryption keys 218 are generated (step 304) and, 

subsequent transmission. 45 optiona ii y) displayed to the user (step 306). Any of the well 

The HTML forms emanating from the financial server can known encryption techniques can be used to generate the 
contain any combination of the above mentioned new fields encryption keys 218. Encryption techniques are described in 
in a FORM tag. Furthermore, the present invention can also Schneier, Applied Cryptography, John Wiley & Sons, 2d ed., 
accommodate a version of HTML that does not incorporate jqq^ which is hereby incorporated by reference as back- 
any of the new fields. 50 groun d information. 

Although the present invention has been described with ^ imtia ii 2a tion procedure 226 then encrypts the user's 

reference to a particular syntax for the new field in the cncry ption keys 218 using the browser's encryption key 240 

HTML FORM tag, it is not limited to this particular embodi- (step 30g) to protect those keys from misuse or 

ment. Any other syntax can be used provided that it provides misappropriation, and stores them in a predefined location 

a similar function. In addition, the present invention can be ss ^ web browsef , s address space (step 310) 
achieved using different HTML tags or through the use of 

new HTML tags. Financial Server Processing 

The general architecture associated with the present 

invention has now been disclosed. Attention presently turns ^GS. 12A-12B illustrate the steps used by the financial 

to a more detailed consideration of the architecture of the 6° server 102 in processing requests and transactions from the 

invention, the processing performed by the invention, the users - A uscr accesses the financial server 102 by means of 

distinctions between the elements of the architecture, and ™ account identifier 134 and a password 136 (step 320). The 

the advantages associated with the disclosed technology. financial server 102 verifies the account 134 and its pass- 
word 136 (step 322). This verification can be performed by 

Financial Transaction Processing Overview 6S matching me account 134 and password 136 against the data 

FIG. 9 illustrates the steps used in the financial transaction in the user database 132. If the financial server 102 has 

processing system 100 and method of the present invention. determined that the user is new (step 324-Y) it transmits a 
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user registration form 264 to the user (step 326). The details (step 350). The form data is then processed accordingly (step 

of the user registration procedure is described in detail 352). The procedure then awaits for a new client commu- 

below with reference to FIG. 13. nication. 

Otherwise, the user has an established account 134 with An incoming message 143 that contains the digital sig- 

the financial server 102 (step 324-N). The financial server 5 nature of the user (i.e., flag«"S") is processed using some of 

102 awaits for transmissions from the client (step 328). The the same steps as a message that is encrypted with the user's 

transmissions can be requests for web pages, form data, as digital signature and timestamp. The financial server 102 

well as other types of communications. The financial server locates the digital signature of the user within the message 

102 identifies the type of transmission received from the which is verified with the user's public key 140 (step 348). 

client (step 330) and processes it accordingly. 10 The audit trail 122 is then updated with the user's account, 

If the transmission was a request for one or more web di B ital signature, timestamp, and the form data (step 350). 

pages, the financial server 102 obtains the requested web ^ form data * then processed accordingly (step 352). The 

page and transmits them to the user (step 334). The web procedure then awaits for a new client communication, 

pages can contain HTML forms that are encrypted (e.g., For messages that are not received in a special format 

documents with confidential information are encrypted). 15 (i.e., messages that are received in a non-encrypted, plain 

The encrypted forms are identified by special fields in the format), the audit trail 122 is updated with the user's account 

FORM tag as was described above previously with reference and the form data 256 (step 350). The form data is then 

to FIG. 7. Messages with confidential user information sent processed accordingly (step 352). The procedure then awaits 

by a client to the server are preferably encrypted with a for a new client communication, 

session key. Forms sent by the server to a client are prcf- 20 _ , TT _ . . _ , 

erably encrypted by the server with the client's public key, Server s User ""P*™*" Procedure 

because any form or document encrypted with the client's FIG. 13 illustrates the steps used by the web browser 216 

public key can be decrypted and viewed only by a person or in processing a user registration form 264 shown in FIG. 14. 

system having access to the client's private key. The web browser 216 receives an HTML document con- 

Altemately, forms containing confidential information 25 taining a user registration form 264 from the financial server 

sent by the server to a client can be encrypted with a session 102 (step 360). 

key generated by either the server or client. If the session key The user registration form 264 includes data entry fields 

is generated by the server, the session key is encrypted with that the user fills in (step 362). The web browser inserts into 

the client's pub he key, attached to the encrypted form being 3Q the registration form user information (provided by the user 

sent to the client. In this embodiment, me client first decrypts of the client computer and/or available to it from other 

the session key with its private key and then decrypts the resources in the client computer), typically including data 

form with the session key. Session key encryption is often that uniquely identifier the user such as the user's name, 

preferred for encrypting documents (as opposed to short social security number or equivalent identifier, and the 

messages) because it is typically performed using encryption 35 financial institution account number for an account previ- 

techniques (such as DES) that are much less computation- ously established by the user with the financial institution 

ally expensive than public/private key encryption. associated with the server. 

In yet another alternate embodiment, the server can utilize The web browser 216, having identified the form as the 

a different pair of public/private encryption keys for each user registration form from the request field of the FORM 

user. In another alternate embodiment, the server can utilize 4Q tag (i.e., request="register"), obtains the users public 

a different pair of public/private encryption keys for each encryption key 218 and places it into a predefined location 

user for each logon session. within the return message (step 364). The users public key 

If the transmission is a return message, the flag field 258 218 is stored in an encrypted format in a specified location 
of the header record 252 associated with the message is within the web browser's address space. The user's encryp- 
decoded in order to identify the format type (step 332). For 45 tion keys 218 were encrypted with the browser's encryption 
an encrypted message (i.e., flag="E"), the server's private key 240. Thus, the web browser decrypts the key from the 
key 142 is used to decrypt the encrypted session key 254 known location with its own encryption key 240. 
(step 336). The session key was encrypted by the user's web The web browser 216 then uses the digital signature 
browser 216 with the server's public key. The session key procedures 230 to digitally sign the form data with the user's 
254 is then used to decrypt the enclosed form data 256 (step so private key 218 (step 366). Next, the web browser 216 uses 
338). The server's audit trail 122 is then updated with the the random session key generation procedures 222 to gen- 
user's account and the form data 256 (step 340). The form erate a random session key 254 (step 368). The random 
data 256 is then processed accordingly (step 342). session key 254 is used to encrypt the form data (step 370). 

For an encrypted message that contains the users digital The session key 254 is affixed to the top of the message and 
signature and timestamp (i.e., flag«"A"), the server's private 55 encrypted with the servers public key 142. The servers 
key 142 is used to decrypt the embedded session key 254 public key 142 is transmitted through the key field in the 
(step 344). The session key 254 is then used to decrypt the FORM tag (i.e., key«"server's public key") (step 372). The 
enclosed form data 256 (step 346), Next, the user's digital return message is then formatted using the formatting pro- 
signature 218 is located within the message and verified with cedures 224 and transmitted to the server (step 374). 
the user's public key 140. The timestamp associated with the 50 A random session key is a random-bit string generated by 
user's digital signature is also extracted from a predefined means of a random process. Typically, the key bits are 
location within the message (step 348). The user's public generated from a reliably random source or a cryptographi- 
key 140 is obtained from the server's user database 132. The cally secure pseudo -random bit generator. Any of the well 
financial server 102 searches the user database 132 using the known random sequence generators can be used. A descrip- 
account ID field 257 of the header record associated with the 65 tion of these techniques can be found in the Schneier 
message. The audit trail 122 is then updated with the user's reference previously mentioned with respect to FIGS. 10 
account, digital signature, timestamp, and the form data and 11. 
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The server decrypts and verifies the information in the transmissions during a single session, in which case step 396 

received registration message. If the information satisfies is skipped after the transmission of the first encrypted client 

predefined acceptance criteria, such as matching user in for- message during a session. 

matton associated with a previously established account at The session key 254 is encrypted with the server's public 

the financial institution, then a user information record is 5 key 142 and affixed to the encrypted message (step 398). As 

added to the user database 132. As shown in FIG. 2, the user DO ted above with respect to FIG. 8, the server's encryption 

information record identifies the user and the user's public key is transmitted to the web browser either initially with the 

key. Alternately (e.g., if the server's database 132 already first transmitted HTML form or with each transmitted 

contains user records for every user having an account at the HTML form requiring encryption, 

associated financial institution), a previously existing user 10 A hcadcr rccord 2 S2 is then generated containing a flag 

information record is updated to include the user's public 2 58 having the appropriate value ("A") and the key length 

^ c y- 260 of the enclosed session key 254. The message is 

Web Browser formatted and then transmitted to the financial server 102 

(step 400). 

Once the user is registered with the financial server 102, 15 If the requested return message format specified encryp- 

the user, through the web browser 216, exchanges HTML tion (i.e., oufformat=" encrypt"), the web browser 216 per- 

transaction forms and return messages with the financial forms some of the same steps described above. The web 

server 102. At least some of the HTML documents sent by browser 216 randomly generates a session key 254 (step 

the server to a client will contain an HTML FORM tag. In 394). The form data is then encrypted with the randomly 

accordance with a preferred embodiment, the FORM tag 20 generated session key 254 (step 396). The session key 254 

includes special fields that indicate how the associated is aflixed to the encrypted form data and encrypted with the 

HTML document is formatted (e.g., whether or not it is server's public key 142 (step 398). A header record 252 is 

encrypted). If the HTML document sent by the server to a then generated containing a flag 258 having the appropriate 

client is encrypted, a special "key" field in the FORM tag value ("E") and the key length 260 of the enclosed session 

can be used to specify the server's public key. If the form is 25 key. The message is formatted and then transmitted to the 

of the type that requests user information be returned to the financial server 102 (step 400). 

server, the FORM tag also includes special fields that If the requested return message format specified the user's 

instruct the client's Web browser as to how the return digital signature (i.e., oufformat=>"sign"), the web browser 

message should be formatted before it is returned to the 216 signs the form data with the user's private key 218 (step 

server. The client's web browser 216 reads these FORM tag 4^0). In addition, a timestamp is generated and appended to 

fields and performs the appropriate procedures to enable the th e f orm data (step 410). A header record 252 is then 

user to read the HTML document and to properly format the generated containing the appropriate flag value ("S"). Since 

message for transmission back to the server. no session key is enclosed in the message, the key length 



FIGS. 15A-15B illustrate the steps used by the web 35 field is blank. The message is formatted and then transmitted 

browser 216 in processing HTML documents that are to the financial server 102 (step 412). 
received from the financial server 102. Upon receipt of an Jq conclusion, the aforementioned description describes a 

HTML document (step 380), the web browser 216 inspects method and system for securely transmitting transactions 

the fields of the FORM tag. If the FORM tag indicates that embodied as HTML forms between a financial server and a 

the form associated with the tag is encrypted (i.e., the ^ weD browser. The technology of the present invention incor- 

existence of an informal field) (step 382-Y), the web porates five security features to ensure that only the intended 

browser 216 recognizes that the data contained between the parties of the transaction securely receive and transmit a 

FORM tag pairs is encrypted. The web browser 216 reads transaction. The five security features include: privacy, in 

the data from the file until it reaches the corresponding the form of session key encryption; data integrity, through 

FORM tag pair (i.e., </FORM>) (step 414). The web 45 me use of data encryption; access control, via a password 

browser 216 decrypts the form with the user's private key mechanism; user nonrepudiation, by means of digital sig- 

218 (step 416) and continues to read the tags in the HTML natures and timestamps; and a server side audit trail. These 

document. security features are embedded in the financial server and 

Next, the web browser 216 detects if the FORM tag has web browser in an automatic and transparent manner, 
an outformat field (step 384). If the FORM tag does not 50 

include an outformat field (step 384-N), the form is dis- Alternate Embodiments 

played and processed accordingly (step 386). Otherwise While the present invention has been described with 

(step 384- Y), the outformat field is stored and the form is reference to a few specific embodiments, the description is 

displayed and processed accordingly (step 388). illustrative of the invention and is not to be construed as to 

Once the form has been processed, the web browser 216 55 limiting the invention. Various modifications may occur to 

prepares the return message in accordance with the those skilled in the art without departing from the true spirit 

requested directives specified in the stored oufformat field and scope of the invention as defined by the appended 

(step 390). claims. 

If the requested return message format specified encryp- Further, the method and system described hereinabove is 

tion with a digital signature and timestamp (i.e., oufformato 60 amenable for execution on various types of executable 

"ensign"), the web browser 216 digitally signs the form data mediums other than a memory device such as a random 

with the user's private key 218 and appends a timestamp at access memory. Other types of executable mediums can be 

a predefined location within the message (step 392). Next, used, such as but not limited to, a computer readable storage 

the web browser 216 randomly generates a session key 254 medium which can be any memory device, compact disc, or 

(step 394). The message is then encrypted with the randomly 65 floppy disk. 

generated session key 254 (step 396). In some embodiments, Although the present invention has been described with 

a single session key is used for all encrypted client message reference to encryption and digital signature techniques that 
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utilize encryption key pairs, it is not Limited to this particular 
technique. Any technology or technique that provides simi- 
lar functionality can be utilized. 

Furthermore, one skilled in the art can easily modify the 
present invention to incorporate a digital signature mecha- 
nism in the HTML forms that are transmitted to a web 
browser. Moreover, additional security features can be easily 
added to either the client or server side of the transaction 
processing. 

What is claimed: 

1. A computer-implemented method for transmitting 
transactions between at least one client computer and at least 
one server computer interconnected by a communications 
link, the method comprising the steps of: 

(a) receiving one or more HTML documents at the client 
computer from the server computer, a subset of the 
documents including a header record and also including 
one or more HTML FORM tags, the one or more 
HTML FORM tags being distinct from the header 
record, a first subset of the HTML FORM tags having 
an outformat field indicating a specified outgoing trans- 
mission cryptographic protocol; 

(b) receiving at the client computer input form data 
corresponding to the HTML FORM tag; 

(c) generating secure form data by applying the specified 
outgoing transmission security cryptographic protocol 
of the HTML FORM tag to the input form data; and 

(d) transmitting a return message including the secure 
form data to the server computer. 

2. The method of claim 1, 

wherein the specified outgoing transmission crypto- 
graphic protocol of the outformat field of the HTML 
FORM tag is selected from a set consisting of an 
encrypt protocol, a sign protocol including a digital 
signature and a timestamp, and an ensign protocol 
including encryption with a digital signature and a 
timestamp. 

3. The method of claim 1, in accordance with the cryp- 
tographic protocol of the HTML FORM tag, 

said step (c) further including the steps of: 

(1) generating a first encryption key; 

(2) encrypting the input form data, including any 
inserted user related information, with the first 
encryption key; 

(3) affixing the first encryption key to the return mes- 
sage; and 

(4) encrypting the first encryption key with a second 
encryption key. 

4. The method of claim 3, 

step (c)(1) further including the step of utilizing a random 
key sequence generator to generate the first encryption 
key. 

5. The method of claim 3, wherein a third subset of the 
HTML FORM tags includes a key field; and 

said step (c)(4) further including the step of obtaining the 
second encryption key from the server computer using 
the key field. 

6. The method of claim 3, 

said step (c)(1) further including the step of: 
prior to the generating step, storing a digital signature 
associated with a specified user in the return message 
in accordance with the cryptographic protocol speci- 
fied in the HTML FORM tag. 

7. The method of claim 6, 

step (c) further including the steps of: 
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generating a digital signature and a digital signature 
verifier; and 

providing the server computer with the digital signature 
verifier 

8. The method of claim 1, 

step (c) further including the step of storing a timestamp 
in the return message, in accordance with the crypto- 
graphic protocol specified in the HTML FORM tag. 

9. A web browser system for accessing data within a 
computer system including at least one client computer 
connected through a communications link with at least one 
server computer, the web browser system comprising: 

a memory for storing a plurality of HTML documents, one 
or more of the HTML documents including a header 
record and also having one or more HTML FORM tags, 
the one or more HTML FORM tags being distinct from 
the header record, a first subset of the HTML FORM 
tags having an outformat field indicating a specified 
outgoing transmission cryptographic protocol for use in 
returning form data; 

a browsing mechanism for retrieving various ones of the 
HTML documents from the server and for inserting 
user related information in the form data which is 
included in a return message, 

the browsing mechanism including a cryptographic pro- 
cessing mechanism for generating secure form data by 
applying the specified outgoing transmission crypto- 
graphic protocol from the HTML FORM tag to the 
form data, 

the browsing mechanism for transmitting a return mes- 
sage including the secure form data from the client 
computer to the server computer to provide secure 
transmission of the return message transmitted to the 
server computer. 

10. The web browser system of claim 9, wherein 

the cryptographic processing mechanism includes an 
encryption processing mechanism for encrypting the 
return message and decrypting HTML documents in 
accordance with the specified cryptographic protocol 
format of the HTML FORM tag. 

11. The web browser system of claim 9, wherein 

the cryptographic processing mechanism includes a digi- 
tal signature processing mechanism for signing the 
return message and authenticating HTML documents 
when the specified outgoing transmission crypto- 
graphic protocol is a sign format. 

12. The web browser system of claim 11, wherein 

the digital signature processing mechanism includes a 
timestamp processing mechanism responsive to the 
cryptographic protocol of the HTML FORM tag. 

13. The web browser system of claim 9, wherein 

the cryptographic processing mechanism includes an 
encryption key generation mechanism for creating one 
or more encryption keys. 

14. The web browser system of claim 13, wherein 

the encryption key generation mechanism includes a 
random key generation mechanism for creating one or 
more random session keys. 

15. A computer program product for secure data trans- 
mission between a server computer and a client computer, 
the computer program product for use in conjunction with a 
computer system, the computer program product comprising 
a computer readable storage medium and a computer pro- 
gram mechanism embedded therein, the computer program 
mechanism comprising: 
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a web browser that receives one or more HTML docu- 
ments from the server computer, a subset of the HTML 
documents including a header record and also including 
one or more HTML FORM tags, the one or more 
HTML FORM tags being distinct from the header 5 
record, a first subset of the HTML FORM tags having 
an outformat field indicating a specified outgoing trans- 
mission cryptographic protocol, 

the web browser including a cryptographic processing 
mechanism for generating secure form data by applying 10 
the specified outgoing transmission security format 
from the HTML FORM tag to the form data, 

the web browser transmitting a return message including 
the secure form data from the client computer to the 
server computer. 15 

16. The computer program product of claim 15, wherein 
the cryptographic processing mechanism includes an 

encryption processing mechanism for decrypting 
HTML documents and encrypting the return message ^ 
in accordance with the specified cryptographic protocol 
of the HTML FORM tag. 

17. The computer program product of claim 15, 

the cryptographic processing mechanism includes a digi- 
tal signature processing mechanism for signing the 25 
return message and authenticating the HTML docu- 
ments in accordance with the specified outgoing trans- 
mission cryptographic protocol of the HTML FORM 
tag. 

18. The computer program product of claim 17, wherein 30 
the digital signature processing mechanism includes a 

timestamp processing mechanism for use in conjunc- 
tion with the specified outgoing transmission crypto- 
graphic protocol of the HTML FORM tag. 

19. The computer program product of claim 15, wherein 35 
the cryptographic processing mechanism including an 

encryption key generation mechanism for creating one 
or more encryption keys. 

20. The computer program product of claim 19, wherein 
the encryption key generation mechanism including a 40 

random key generation mechanism for creating one or 
more random session keys. 

21. A computer network for financial transaction 
processing, the network comprising: ^ 

a plurality of client computers, each client computer 

associated with one or more users; 
at least one financial server comprising: 

a memory for storing a plurality of HTML documents 
representing financial transactions, each HTML 50 
document including form data, a subset of the HTML 
documents including a header record and also 
including one or more HTML FORM tags, the one or 
more HTML FORM tags being distinct from the 
header record, a first subset of the HTML FORM 55 
tags having an outformat field indicating a specified 
outgoing transmission cryptographic protocol, for 
use in exchanging financial transactions between the 
client computers and the server computer; 

one or more cryptographic processing mechanisms for 50 
use in encoding form data and decoding each 
received HTML document; and 

a server mechanism for managing communications 
from the client computers, a subset of the commu- 
nications including a return message including the 
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form data, the server mechanism including instruc- 
tions to interpret the HTML FORM tags that include 
the cryptographic protocol associated with each 
received return message and to process each received 
return message in accordance with one or more 
corresponding cryptographic protocol mechanisms. 

22. The network of claim 21, 

the cryptographic processing mechanism including: 
an encryption processing mechanism for encrypting the 

form data and decrypting the HTML documents; 
a user information database that includes user public 
key information associated with each user registered 
to exchange confidential information with the finan- 
cial server; 

a digital signature verification mechanism for verifying 
a digital signature in each digitally signed commu- 
nication received from a client computer in accor- 
dance with the corresponding digital signature, if 
any, stored in the user information database; and 

an audit trail for storing records of digitally signed 
communications received from client computers suf- 
ficient to prove that such each received communica- 
tion was digitally signed by a respective user regis- 
tered to exchange confidential information with the 
financial server. 

23. The network of claim 22, 

the cryptographic protocol selected from the set consist- 
ing of encryption, digital signature and timestamp, and 
encryption with digital signature and timestamp. 

24. The network of claim 22, 

each client computer including a web browser for access- 
ing HTML documents from the financial server. 

25. The network of claim 24, 

the web browser including a cryptographic processing 
mechanism for encrypting form data and decrypting the 
accessed HTML documents in accordance with the 
specified cryptographic protocol format of the HTML 
FORM tag. 

26. The network of claim 24, 

the web browser including a digital signature processing 
mechanism for signing the return message and authen- 
ticating HTML documents when the specified outgoing 
transmission cryptographic protocol is a sign format. 

27. The network of claim 26, 

the digital signature processing mechanism further 
including a timestamp processing mechanism respon- 
sive to the cryptographic protocol of the HTML FORM 
tag. 

28. The network of claim 24, 

the web browser including an encryption key generation 
mechanism for creating one or more encryption keys. 

29. The method of claim 1 wherein a third subset of the 
HTML FORM tags have a request field indicating the type 
of form. 

30. The method of claim 29 wherein the request field 
indicates that a registration HTML form is being sent to the 
client, the registration form for transmitting a client public 
key from the client to the server. 

31. The method of claim 1 wherein a fourth subset of the 
HTML FORM tags have a key field that is used to indicate 
a public key associated with the server. 
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